mirror of
https://github.com/openziti/ziti.git
synced 2026-10-13 15:51:21 +00:00
Andrew Martinez
52b0c7acab
- formerly posture queries only had an updatedAt time copied from the source posture check which. For MFA posture checks this is only correct when not using promptOnWake/Unlock - prompt timer reductions due to wake/unlock now update postureQuery updatedAt values - subsequent reconfigurations to the posture check (i.e. patching a posture check) is also taken into account - latest time.Time wins - test for MFA posture check no longer use gabs and instead use the relevant input/output rest_model.* structures
115 lines
3.1 KiB
Go
115 lines
3.1 KiB
Go
/*
|
|
Copyright NetFoundry, Inc.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
https://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package model
|
|
|
|
import (
|
|
"fmt"
|
|
"github.com/openziti/edge/controller/persistence"
|
|
"go.etcd.io/bbolt"
|
|
"time"
|
|
)
|
|
|
|
var _ PostureCheckSubType = &PostureCheckMacAddresses{}
|
|
|
|
type PostureCheckMacAddresses struct {
|
|
MacAddresses []string
|
|
}
|
|
|
|
func (p *PostureCheckMacAddresses) LastUpdatedAt(apiSessionId string, pd *PostureData) *time.Time {
|
|
return nil
|
|
}
|
|
|
|
func (p *PostureCheckMacAddresses) GetTimeoutRemainingSeconds(_ string, _ *PostureData) int64 {
|
|
return PostureCheckNoTimeout
|
|
}
|
|
|
|
func (p *PostureCheckMacAddresses) GetTimeoutSeconds() int64 {
|
|
return PostureCheckNoTimeout
|
|
}
|
|
|
|
func (p *PostureCheckMacAddresses) FailureValues(_ string, pd *PostureData) PostureCheckFailureValues {
|
|
return &PostureCheckFailureValuesMac{
|
|
ActualValue: pd.Mac.Addresses,
|
|
ExpectedValue: p.MacAddresses,
|
|
}
|
|
}
|
|
|
|
func (p *PostureCheckMacAddresses) Evaluate(_ string, pd *PostureData) bool {
|
|
if pd.Mac.TimedOut {
|
|
return false
|
|
}
|
|
|
|
validAddresses := map[string]struct{}{}
|
|
for _, address := range p.MacAddresses {
|
|
validAddresses[address] = struct{}{}
|
|
}
|
|
|
|
for _, address := range pd.Mac.Addresses {
|
|
if _, found := validAddresses[address]; found {
|
|
return true
|
|
}
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
func newPostureCheckMacAddresses() PostureCheckSubType {
|
|
return &PostureCheckMacAddresses{}
|
|
}
|
|
|
|
func (p *PostureCheckMacAddresses) fillFrom(handler Handler, tx *bbolt.Tx, check *persistence.PostureCheck, subType persistence.PostureCheckSubType) error {
|
|
subCheck := subType.(*persistence.PostureCheckMacAddresses)
|
|
|
|
if subCheck == nil {
|
|
return fmt.Errorf("could not covert mac address check to bolt type")
|
|
}
|
|
|
|
p.MacAddresses = subCheck.MacAddresses
|
|
return nil
|
|
}
|
|
|
|
func (p *PostureCheckMacAddresses) toBoltEntityForCreate(tx *bbolt.Tx, handler Handler) (persistence.PostureCheckSubType, error) {
|
|
return &persistence.PostureCheckMacAddresses{
|
|
MacAddresses: p.MacAddresses,
|
|
}, nil
|
|
}
|
|
|
|
func (p *PostureCheckMacAddresses) toBoltEntityForUpdate(tx *bbolt.Tx, handler Handler) (persistence.PostureCheckSubType, error) {
|
|
return &persistence.PostureCheckMacAddresses{
|
|
MacAddresses: p.MacAddresses,
|
|
}, nil
|
|
}
|
|
|
|
func (p *PostureCheckMacAddresses) toBoltEntityForPatch(tx *bbolt.Tx, handler Handler) (persistence.PostureCheckSubType, error) {
|
|
return &persistence.PostureCheckMacAddresses{
|
|
MacAddresses: p.MacAddresses,
|
|
}, nil
|
|
}
|
|
|
|
type PostureCheckFailureValuesMac struct {
|
|
ActualValue []string
|
|
ExpectedValue []string
|
|
}
|
|
|
|
func (p PostureCheckFailureValuesMac) Expected() interface{} {
|
|
return p.Expected()
|
|
}
|
|
|
|
func (p PostureCheckFailureValuesMac) Actual() interface{} {
|
|
return p.ActualValue
|
|
}
|